3 ms·
I solidly feel it’s a cop out for an ISP to not filter their traffic to block spoofed IPs. In my eyes, there’s zero legitimate reason that this guy should get f
by jsjohnst 9y ago
I solidly feel it’s a cop out for an ISP to not filter their traffic to block spoofed IPs. In my eyes, there’s zero legitimate reason that this guy should get flooded, but alas, our industry gets lazier and more careless each year.
- walrus01 9y agoThere is no spoofing involved there. We're talking about typos of 192.168 (private space) typed as 192.68 which is "real" space. It is not like ISPs are leaking rfc1918 IP space.
- jsjohnst 9y agoVery true that it is a typo, which I had noticed, and thanks for calling out. Still doesn’t invalidate my point though. My theory is that a lot of that traffic is likely coming from spoofed IPs as I doubt there would be substantial sustained legitimate, but improperly directed, traffic. My guess is a lot of it is shoddily written malicious traffic.
- always_good 9y agoAlso, outbound traffic needs to be expensive, not free like it is now. There simply shouldn't exist the scenario where a household is unaware that their hijacked toasters has been saturating their upload for months. It seems unfair, but these are solutions that actually work. Waiting for things to fix themselves clearly isn't. We're quickly entering a reality where everyone will be using Cloudflare instead of just most of us. It's pretty incredible how far naive decentralization got us, though. Soon we're going to be looking back in awe.
- bradknowles 9y agoGoogle for “BCP 38”. This pain has been known for many, many years.
- jsjohnst 9y agoI don’t need to Google it, I’m well aware. Part of why I said what I did.